CVE-2024-6084

CVE-2024-6084 affects the Bethesda/itsourcecode Pool Online Reservation System up to version 1.0. The vulnerable component is the uploadImage function in /admin/mod_room/controller.php?action=add, where manipulating the image argument enables unrestricted file uploads. This vulnerability can be e...

CodeProjects Restaurant Reservation System SQL Injection Vulnerability

CodeProjects Restaurant Reservation System is a Php based restaurant reservation system. A SQL injection vulnerability exists in CodeProjects Restaurant Reservation System v1.0, which originates from a SQL injection in the reservid parameter of viewreservations.php...

CodeProjects Restaurant Reservation System Cross-Site Scripting Vulnerability

CodeProjects Restaurant Reservation System is a Php based restaurant reservation system. A cross-site scripting vulnerability exists in CodeProjects Restaurant Reservation System v1.0, which originates from a cross-site scripting vulnerability in the Date parameter of index.php...

Simple Online Hotel Reservation System Code Issue Vulnerability

Simple Online Hotel Reservation System is an online hotel reservation system. A code issue exists in version 1.0 of the Simple Online Hotel Reservation System where an incorrect manipulation of the parameter photo can result in unrestricted file uploads...

Pool of Bethesda Online Reservation System Code Issue Vulnerability

Pool of Bethesda Online Reservation System is a pool online reservation system by janobe individual developer. A code issue vulnerability exists in Pool of Bethesda Online Reservation System version 1.0 and prior versions, which stems from the parameter image in file...

Pool of Bethesda Online Reservation System SQL Injection Vulnerability

Pool of Bethesda Online Reservation System is a swimming pool online reservation system by janobe individual developer. A SQL injection vulnerability exists in Pool of Bethesda Online Reservation System version 1.0, which stems from a parameter email in the file login.php that can lead to SQL...

CVE-2024-6112: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in itsourcecode Pool of Bethesda Online Reservation System 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument logemail leads to sql injection. The attack can be initiated remotely. The exploit has...

CVE-2024-6111: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in itsourcecode Pool of Bethesda Online Reservation System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2024-6115: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical was found in itsourcecode Simple Online Hotel Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file addroom.php. The manipulation of the argument photo leads to unrestricted upload. The attack can be launched remotely...

CVE-2024-37800

CodeProjects Restaurant Reservation System v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Date parameter at index.php...

CVE-2024-37800

CodeProjects Restaurant Reservation System v1.0 is affected by a reflected cross-site scripting (XSS) vulnerability triggered via the Date parameter in index.php. The issue is documented across multiple sources (CVE-2024-37800; NVD; CNNVD; CVELIST; PT-2024-27759; vulnrichment) and is described as...

CVE-2024-37799

CodeProjects Restaurant Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the reservid parameter at viewreservations.php...

CVE-2024-37799

The CodeProjects Restaurant Reservation System v1.0 is vulnerable to a SQL injection vulnerability. The flaw originates from the improper neutralization of special elements used in an SQL command within the reserv_id parameter at the view_reservations.php endpoint. Exploitation of this vulnerabil...

PT-2024-27759

Name of the Vulnerable Software and Affected Versions CodeProjects Restaurant Reservation System version 1.0 Description The issue is related to a reflected cross-site scripting XSS vulnerability. This vulnerability occurs via the Date parameter at the "index.php" endpoint. There is no informatio...

PT-2024-37388 · Bethesda · Bethesda Online Reservation System

Name of the Vulnerable Software and Affected Versions: Bethesda Online Reservation System version 1.0 Description: A critical vulnerability has been found in the Bethesda Online Reservation System. The issue affects an unknown part of the file login.php. The manipulation of the email argument lea...

PT-2024-37391 · Unknown · Monbela Tourist Inn Online Reservation System

Name of the Vulnerable Software and Affected Versions: Monbela Tourist Inn Online Reservation System versions up to 1.0 Description: A critical vulnerability has been found in the Monbela Tourist Inn Online Reservation System, affecting an unknown function of the file controller.php. The...

PT-2024-27757 · Unknown · Code-Projects Restaurant Reservation System

Name of the Vulnerable Software and Affected Versions: CodeProjects Restaurant Reservation System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the reserv id parameter at the "view reservations.php" endpoint. Recommendation...

Pool of Bethesda Online Reservation System SQL Injection Vulnerability

Pool of Bethesda Online Reservation System is a swimming pool online reservation system by janobe individual developer. A SQL injection vulnerability exists in Pool of Bethesda Online Reservation System version 1.0, which stems from a parameter logemail in the file index.php that can lead to SQL...

CVE-2024-37799: Improper Neutralization of Special Elements used in an SQL Command

CodeProjects Restaurant Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the reservid parameter at viewreservations.php...

CVE-2024-6084: Unrestricted Upload of File with Dangerous Type

A vulnerability has been found in itsourcecode Pool of Bethesda Online Reservation System up to 1.0 and classified as critical. Affected by this vulnerability is the function uploadImage of the file /admin/modroom/controller.php?action=add. The manipulation of the argument image leads to...